On Wed, Aug 26, 2026 at 02:31:57PM +0200, Lionel Élie Mamane wrote:
> Hi,
>
> Does the Debian infrastructure, such as:
>
> * HKP server keyring.debian.org
>
> * (forgot the name) the software that checks signature of changes/dsc
> files on uploads
>
> support ed448 sub-keys? If not, maybe ed25519 sub-keys? My previous
> signature sub-key has expired, and *cough* *cough* my first upload in
> *cough* *cough* 10+ years is being rejected because of that. The ed448
> signature sub-key I uploaded to keyring.debian.org strictly before 27
> June seems not have been part of the 27 June update, I guess the
> reason is ed448 sub-keys not being supported? So I'm checking what kind
> of signature sub-key I should create for that now.
ed448 is not a great choice at present because of divergence in PGP
implementations. What software did you use to generate the subkey?
ed25519 should be fine, we have plenty of folk using that already within
the keyring. The NIST curves are also well supported (and can be TPM
backed).
J.
--
No program done by a hacker will | .''`. Debian GNU/Linux Developer
work unless he is on the system. | : :' : Happy to accept PGP signed
| `. `' or encrypted mail - RSA
| `- key on the keyservers.
